testing: minio to use custom CA, nodes to trust this custom CA

Makefile

@@ -21,11 +21,11 @@ IP_FAMILY?=IPV4
 
 MANAGER_CONFIG := testing/scylla-manager/scylla-manager.yaml
 PUBLIC_NET := 192.168.200.
-MINIO_ENDPOINT := http://192.168.200.99:9000
+MINIO_ENDPOINT := https://192.168.200.99:9000
 ifeq ($(IP_FAMILY), IPV6)
 	MANAGER_CONFIG := testing/scylla-manager/scylla-manager-ipv6.yaml
 	PUBLIC_NET := 2001:0DB9:200::
-	MINIO_ENDPOINT := http://[2001:0DB9:200::99]:9000
+	MINIO_ENDPOINT := https://[2001:0DB9:200::99]:9000
 endif
 
 .PHONY: fmt

pkg/scyllaclient/main_test.go

@@ -35,7 +35,12 @@ func (r *rcloneTestHelper) setup() {
 	r.tmpDir = d
 
 	rclone.RedirectLogPrint(log.NewDevelopmentWithLevel(zapcore.InfoLevel).Named("rclone"))
-	rclone.InitFsConfig()
+	// Disable certificate check for scyllaclient package integration tests.
+	// Rclone server here is started on the localhost.
+	// Minio with custom CA certs is verified by integration-tests from other packages.
+	globalOptions := rclone.DefaultGlobalOptions()
+	globalOptions.InsecureSkipVerify = true
+	rclone.InitFsConfigWithOptions(globalOptions)
 	rclone.MustRegisterLocalDirProvider("dev", "", "/dev")
 	rclone.MustRegisterLocalDirProvider("tmp", "", r.tmpDir)
 	rclone.MustRegisterLocalDirProvider("rclonetest", "", "testdata/rclone")

testing/Makefile

@@ -12,18 +12,20 @@ CURRENT_GID  := $(shell id -g)
 SCYLLA_VERSION?=5.1.13
 IP_FAMILY?=IPV4
 
-MINIO_ENDPOINT := http://192.168.200.99:9000
+MINIO_ENDPOINT := https://192.168.200.99:9000
 COMPOSE_FILE := docker-compose-ipv4.yaml
 AGENT_CONFIG := scylla-manager-agent/scylla-manager-agent.yaml
 PUBLIC_NET := 192.168.100.
 SECOND_NET := 192.168.200.
+MINIO_CERT_DIR := ./minio/certs_ipv4
 
 ifeq ($(IP_FAMILY), IPV6)
-	MINIO_ENDPOINT := http://[2001:0DB9:200::99]:9000
+	MINIO_ENDPOINT := https://[2001:0DB9:200::99]:9000
 	COMPOSE_FILE := docker-compose-ipv6.yaml
 	AGENT_CONFIG := scylla-manager-agent/scylla-manager-agent-ipv6.yaml
 	PUBLIC_NET := 2001:0DB9:100::
 	SECOND_NET := 2001:0DB9:200::
+	MINIO_CERT_DIR := ./minio/certs_ipv6
 endif
 
 SCYLLA_ARGS := --smp 2 --memory 2G --seeds $(SECOND_NET)11,$(SECOND_NET)21
@@ -32,6 +34,7 @@ SCYLLA_SECOND_CLUSTER_ARGS := --smp 2 --memory 2G --seeds $(SECOND_NET)31
 export SCYLLA_ARGS
 export SCYLLA_SECOND_CLUSTER_ARGS
 export MINIO_ENDPOINT
+export MINIO_CERT_DIR
 
 include .env
 
@@ -89,7 +92,7 @@ endif
 
 	@./nodes_exec "rm /root/.cqlshrc || true"
 	@echo "==> Adding Minio user"
-	./minio/add_user.sh
+	./minio/add_user.sh || true
 	@echo "==> Initialising cluster"
 	@$(CQLSH_NODE) $(PUBLIC_NET)11 -e "ALTER KEYSPACE system_auth WITH REPLICATION = {'class': 'NetworkTopologyStrategy', 'dc1': 3, 'dc2': 3}"
 
@@ -134,6 +137,12 @@ drop-keyspace: ## Drop Scylla Manager keyspace
 deploy-agent: ## Update agent to the latest build on all nodes
 	@./nodes_cp ../scylla-manager-agent.dev /usr/bin/scylla-manager-agent
 	@./nodes_cp $(AGENT_CONFIG) /etc/scylla-manager-agent/scylla-manager-agent.yaml
+ifeq ($(IP_FAMILY), IPV6)
+	@./nodes_cp minio/certs_ipv6/CAs/rootCA.pem /usr/local/share/ca-certificates/rootCA.crt
+else
+	@./nodes_cp minio/certs_ipv4/CAs/rootCA.pem /usr/local/share/ca-certificates/rootCA.crt
+endif
+	@./nodes_exec "sudo update-ca-certificates"
 
 .PHONY: restart-agent
 restart-agent: ## Restart agent on all nodes

testing/docker-compose.yaml

@@ -180,7 +180,7 @@ services:
     image: minio/minio:${MINIO_VERSION}
     privileged: true
     user: ${CURRENT_UID}:${CURRENT_GID}
-    command: server /data --console-address ":9001"
+    command: server /data --console-address ":9001" --certs-dir=/.minio
     environment:
       MINIO_REGION: ${MINIO_REGION}
       MINIO_ROOT_USER: ${MINIO_ROOT_USER}
@@ -189,6 +189,9 @@ services:
       - type: bind
         source: ${MINIO_DATA_DIR}
         target: /data
+      - type: bind
+        source: ${MINIO_CERT_DIR}
+        target: /.minio
     ports:
       - "9000:9000"
       - "9001:9001"

testing/minio/add_user.sh

@@ -11,7 +11,7 @@ function mc() {
   docker run -i --rm --network=host -v $(pwd)/minio/mc:/root/.mc/ -v $(pwd)/minio/user-policy.json:/user-policy.json  minio/mc:"$MINIO_MC_VERSION" "$@"
 }
 
-mc config host add minio-test "$MINIO_ENDPOINT" "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"
-mc admin policy add minio-test user /user-policy.json
-mc admin user add minio-test "$MINIO_USER_ACCESS_KEY" "$MINIO_USER_SECRET_KEY"
-mc admin policy set minio-test user user="$MINIO_USER_ACCESS_KEY"
+mc --insecure config host add minio-test "$MINIO_ENDPOINT" "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD"
+mc --insecure admin policy add minio-test user /user-policy.json
+mc --insecure admin user add minio-test "$MINIO_USER_ACCESS_KEY" "$MINIO_USER_SECRET_KEY"
+mc --insecure admin policy set minio-test user user="$MINIO_USER_ACCESS_KEY"

testing/minio/certs_ipv4/CAs/rootCA.pem

@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

testing/minio/certs_ipv4/private.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

testing/minio/certs_ipv4/public.crt

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

testing/minio/certs_ipv6/CAs/rootCA.pem

@@ -0,0 +1,35 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

testing/minio/certs_ipv6/private.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

testing/minio/certs_ipv6/public.crt

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

testing/scylla-manager-agent/scylla-manager-agent-ipv6.yaml

@@ -11,4 +11,4 @@ s3:
   secret_access_key: minio1234
   provider: Minio
   region: us-east-1
-  endpoint: http://[2001:0DB9:200::99]:9000
+  endpoint: https://[2001:0DB9:200::99]:9000

testing/scylla-manager-agent/scylla-manager-agent.yaml

@@ -11,4 +11,5 @@ s3:
   secret_access_key: minio1234
   provider: Minio
   region: us-east-1
-  endpoint: http://192.168.200.99:9000
+  endpoint: https://192.168.200.99:9000
+